CVE-2020-28146

Impact

Cross Site Scripting (XSS) vulnerability exists in Eyoucms v1.4.7 and earlier via the addonfieldext parameter.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/eyoucms/eyoucms/issues/12
• https://www.exploit-db.com/exploits/48530
• https://www.eyoucms.com/ask/list_1_0/4511.html
• https://github.com/eyoucms/eyoucms/issues/12
• https://www.exploit-db.com/exploits/48530
• https://www.eyoucms.com/ask/list_1_0/4511.html